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DETAILED ACTION 
Response to Arguments 

1 . Applicant's arguments with respect to claims 31-36,39-46,48-53 and 58-60 have 
been considered but are moot in view of the new ground(s) of rejection. 

2. It should be noted that while Rajasekharan fails to specifically recite that the 
validation key is based on a URL, such a relationship is suggested an is likely present in 
Rajasekharan. Rajasekharan discloses that the verification key is a "digital signature 
corresponding to the source" (Col 5, Lines 27-29). Since the source is "a server 
computer system accessed via a network, such as the Internet" (Col 4, Lines 6-8), it has 
a URL. Since the digital signature is unique to that source, it has a one-to-one 
relationship with the URL, and is very likely to be based on that URL. Nonetheless, in 
the interest of expedited prosecution, a reference teaching creation of a digital 
certificate based on and containing a URL has been cited below. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and^ 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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4. Claims 1-36,39-41 ,44-46, 48-51 , and 58-60 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Rajasekharan et al. (US 6,480,961 ) in view of Xie et al. (US 
6,606,393). 

5. With regard to claim 31 , Rajasekharan discloses a method for validating a data 
stream comprising: 

generating a unique validation key associated with the data stream (source 
indicator), the unique validation key to map the data stream with a source (Col 5, Lines 
28-38), wherein the unique validation key is generated based on an encryption key 
(digital signature is generated using DSA/RSA)(Col 4, Lines 25-27 and Col 5, Lines 27- 
29); 

generating the data stream (data stream is sent)(Col 4, Lines 51-55); 
storing the unique validation key (authorization data is stored at server)(Col 4, 
Lines 8-12); and 

sending the unique validation key (authorization data is sent to client)(CoI 4, Line 
6) and data stream (Col 4, Lines 51-55) to a destination (client). Rajasekharan fails to 
disclose embedding the validation key in the data stream to form a validation key 
embedded data stream or that the validation key is generated based on a URL. 

Xie discloses several methods of authenticating digital messages that are old 
and well known in the art. Xie further discloses that embedding validation information 
within the digital stream is advantageous since removal of embedded information may 
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destroy or alter the content. This provides better security that sending the validation 
data outside of the data stream (Col 1 , Lines 27-45). 

Abdulhayoglu discloses a similar system for verifying the source of received data 
based on a digital certificate included with the data. Abdulhayoglu teaches use of a 
digital certificate that includes a URL of the data source fl|84). This allows the recipient 
to verify that the source of the data is at that URL. This would have been an 
advantageous addition to the system disclosed by Rajasekharan, since it would have 
allowed a recipient of the data stream to be assured that the URL from which the data 
stream is coming is the URL that was requested. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to generate the validation key based on the URL of the 
data source and embed the validation key in the data stream to form a validation key 
embedded data stream in order to provide enhanced security since embedded 
validation keys would be much more difficult to remove from the data stream without 
corrupting it, ensuring that the source and URL could be validated by the recipient of the 
data stream. 

6. With regard to claim 32, Rajasekharan further discloses that the source is any 
one of a source of audio information, video information, audio-video information and the 
URL (Col 4, Lines 1-2). 
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7. With regard to claim 33, Rajasekharan further discloses that generating the 
validation key associated with the data stream comprises generating the unique 
validation key in response to a request for data to be retrieved from the URL. Since the 
source of the unique validation key is a server computer accessed via the Internet (Col 
4, Lines 6-9), it must be accessed via a URL prior to sending the authorization data to 
the client. 

8. With regard to claim 34, Rajasekharan further discloses that generating the 
unique validation key associated with the data stream, said unique validation key to 
map the data stream with a source, comprises: generating the unique validation key 
(Col 5, Lines 28-38) and sending the unique validation key to the destination (Col 4, 
Line 6). 

9. With regard to claim 35, Rajasekharan further discloses that the data stream 
comprises any one of encoded video information, encoded audio information, encoded 
audio-video information, and encoded information from the URL (Col 4, Lines 1-2). 

10. With regard to claim 36, Rajasekharan further discloses receiving the validation 
key at the destination (Col 4, Line 6); sampling the unique validation key embedded 
data stream at the destination to detect the unique validation key (validation key is 
detected and checked) (Col 4, Lines 24-28). 
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1 1 . With regard to claim 39, Rajasekharan discloses: 

receiving a unique validation key associated with the data stream (Col 4, Line 4), 
the unique validation key to map the data stream with a source (Col 5, Lines 28-38); 
receiving the data stream (Col 4, Lines 51-52), wherein the unique validation key is 
generated based on an encryption key (digital signature is generated using 
DSA/RSA)(Col 4, Lines 25-27 and Col 5, Lines 27-29); 

detecting the unique validation key and validating the data stream in response to 
detecting the validation key (key is detected and checked)(Col 4, Lines 24-28). The 
validation key must be stored since the client receives it and analyzes it. Rajasekharan 
fails to disclose that the validation key is embedded in the data stream or that the 
validation key is generated based on a URL. 

Xie discloses several methods of authenticating digital messages that are old 
and well known in the art. Xie further discloses that embedding validation information 
within the digital stream is advantageous since removal of embedded information may 
destroy or alter the content. This provides better security that sending the validation 
data outside of the data stream (Col 1 , Lines 27-45). 

Abdulhayoglu discloses a similar system for verifying the source of received data 
based on a digital certificate included with the data. Abdulhayoglu teaches use of a 
digital certificate that includes a URL of the data source flj84). This allows the recipient 
to verify that the source of the data is at that URL. This would have been an 
advantageous addition to the system disclosed by Rajasekharan, since it would have 
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allowed a recipient of the data stream to be assured that the URL from which the data 
stream is coming is the URL that was requested. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to generate the validation key based on the URL of the 
data source and embed the validation key in the data stream in order to provide 
enhanced security since embedded validation keys would be much more difficult to 
remove from the data stream without corrupting it, ensuring that the source and URL 
could be validated by the recipient of the data stream. 

12. With regard to claim 40, Rajasekharan further discloses that the source is any 
one of a source of audio information, a source of video information, a source of audio- 
video information and the URL (Col 4, Lines 1-2). 

1 3. With regard to claim 41 , Rajasekharan further discloses requesting data to be 
retrieved from the URL. Since the source of the validation key is a server computer 
accessed via the Internet (Col 4, Lines 6-9), it must be accessed via a URL prior to 
sending the authorization data to the client. 

14. Claims 42,43,52,53, and 55-56 are rejected under 35 U.S.C. 103(a) as being 
unpatentable Rajasekharan et al. (US 6,480,961) in view of Xie et al. (US 6,606,393) in 
further view of Willis, Jr. et al. (US 6,738,815). 
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15. With regard to claims 42,43,52, and 53, while the system disclosed by 
Rajasekharan in view of Xie shows substantial features of the claimed invention 
(discussed above), it fails to disclose generating an error if the unique validation key is 
not detected in the data stream or writing the error to a log file. Rajasekharan does 
disclose checking the validation key to determine is the source is an authorized source 
(Col 4, Lines 24-28). Xie discloses that removing embedded validation keys may 
destroy or at least damage the underlying data (Xie, Col 1 , Lines 36-36) 

Willis, Jr. teaches the creation of a log file at a client and writing errors to the log 
file when they occur (Col 6, Lines 44-50). Willis, Jr. further discloses that the logs can 
be uploaded to a server as well (Col 6, Lines 49-50). This would have been an 
advantageous addition to the system disclosed by Rajasekharan in view of Xie since 
generating an error and storing it in a log file would have allowed the server, client, 
and/or users to be notified that the validation key was not found, and that the data may 
be invalid. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to generate an error and write it to a log file if the validation 
data is not detected in the data stream. This would have allowed the server, client, 
and/or users to be notified that the validation keys were not found and that the data may 
be invalid. 

16. Claims 44-46 and 48 are rejected for the same reasons cited above regarding 
claims 31,32,35, and 33, respectively, since they recite substantially identical subject 
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matter. A database is required in order to store the validation key at the server, and is 
therefore inherent. A processor and memory are inherent components of both the 
server and client devices since they are computers. 

17. Claims 49 and 50 are rejected for the same reasons cited above regarding 
claims 31 and 32, respectively, since they recite substantially identical subject matter. A 
bus, processor, and memory containing instructions are inherent components of both 
the server and client devices since they are computers. 

18. With regard to claim 49, Rajasekharan discloses a system comprising: 

a key generation module (KGM) to generate a unique validation key associated 
with a data stream (source indicator), the unique validation key to map the data stream 
with a source (Col 5, Lines 28-38), wherein the unique validation key is generated 
based on an encryption key (digital signature is generated using DSA/RSA)(Col 4, Lines 
25-27 and Col 5, Lines 27-29); 

a client to receive the validation key and data stream (Col 4, Line 6); 

and a database couples with the client to store the unique validation key (client 
stores validation key to perform periodic checks) (Col 4, Line 65 to Col 5, Line 3). 
Rajasekharan fails to disclose embedding the validation key in the data stream to form a 
validation key embedded data stream or that the validation key is generated based on a 
URL 
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Xie discloses several methods of authenticating digital messages that are old 
and well known in the art. Xie further discloses that embedding validation information 
within the digital stream is advantageous since removal of embedded information may 
destroy or alter the content. This provides better security that sending the validation 
data outside of the data stream (Col 1, Lines 27-45). 

Abdulhayoglu discloses a similar system for verifying the source of received data 
based on a digital certificate included with the data. Abdulhayoglu teaches use of a 
digital certificate that includes a URL of the data source fl|84). This allows the recipient 
to verify that the source of the data is at that URL. This would have been an 
advantageous addition to the system disclosed by Rajasekharan, since it would have 
allowed a recipient of the data stream to be assured that the URL from which the data 
stream is coming is the URL that was requested. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to generate the validation key based on the URL of the 
data source and embed the validation key in the data stream in order to provide 
enhanced security since embedded validation keys would be much more difficult to 
remove from the data stream without corrupting it, ensuring that the source and URL 
could be validated by the recipient of the data stream. 

1 9. With regard to claim 50, Rajasekharan further discloses that the source is any 
one of a source of audio information, video information, audio-video information and the 
URL (Col 4, Lines 1-2). 
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20. With regard to claim 51 , Rajasekharan further discloses that the client requests 
data to be retrieved from the URL. Since the source of the data is a server computer 
accessed via the Internet (Col 4, Lines 6-9), it must be accessed via a URL prior to 
sending the data stream to the client. 

21 . Claims 58 and 60 are rejected for the same reasons cited above regarding 
claims 31 and 35, respectively, since they recite substantially identical subject matter. A 
machine-readable medium containing instructions to perform the methods is inherent in 
the system disclosed by Rajasekharan since the system is implemented using 
computers. 

22. With regard to claim 59, Rajasekharan further discloses sampling the data 
stream to detect the unique validation key embedded in the data stream (Col 4, Lines 
24-28). 

Conclusion 

23. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aaron Strange whose telephone number is 571-272- 
3959. The examiner can normally be reached on M-F 8:30-5:00. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Glen Burgess can be reached on 571-272-3949. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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